zoukankan      html  css  js  c++  java
  • Zabbix监控事件日志

    新建服务:eventlog[System,,,"Service control Manager",^7045$,,skip]

    新建任务计划:eventlog[Microsoft-Windows-TaskScheduler/Operational,,,"TaskScheduler",^106$,,skip]

    删除任务计划:eventlog["Microsoft-Windows-TaskScheduler/Operational",,,"TaskScheduler",^141$,,skip]

    修改组策略:eventlog[Security,,,,4739,,]

    删除安全日志:eventlog[Security,,,,1102,,]

    删除用户:eventlog[Security,,,,4726,,]

    用户登录:eventlog[Security,,,,4722,,]

     A member was added to a security-enabled global group:eventlog[Security,,,,4728,,]

    trigger:

    {Template Windows AD DS Security Audit:eventlog[Security,,,,^4728$].logseverity(0)}>1 and {Template Windows AD DS Security Audit:eventlog[Security,,,,^4728$].nodata(600)}=0 and ({Template Windows AD DS Security Audit:eventlog[Security,,,,^4728$].str(Admins)}=1 or {Template Windows AD DS Security Audit:eventlog[Security,,,,^4728$].str(Management)}=1 or {Template Windows AD DS Security Audit:eventlog[Security,,,,^4728$].str(Group Policy)}=1 or {Template Windows AD DS Security Audit:eventlog[Security,,,,^4728$].str(RODC)}=1 or {Template Windows AD DS Security Audit:eventlog[Security,,,,^4728$].str(Controllers)}=1 )
    View Code

    A member was added to a security-enabled universal group:eventlog[Security,,,,4756,,]

    A memeber was added a security-enabled local group:eventlog[Security,,,,4732,,]

    A security-enabled global group was deleted:eventlog[Security,,,,^4730$]

    A security-enabled universal group was deleted:eventlog[Security,,,,^4758$]

  • 相关阅读:
    实现分布式爬虫
    hadoop安装文档
    远程连接mysql和redis配置
    scrapy(2)
    10月10号动手动脑
    10月6日和动手动脑
    10月4日
    课程总结
    又学java的第一天
    第一节测试总结
  • 原文地址:https://www.cnblogs.com/dreamer-fish/p/15723092.html
Copyright © 2011-2022 走看看